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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 
application: 


LISTING OF CLAIMS: 


1. (currently amended):- A Method m ethod f or connecting a first user - torminal u ser terminal 
ft££4-V of a first virtual private network t o a second user tormm a luser terminal (UT2) of a second 
virtual private networks over a network such as the interne^ and-said network containing having 
a plurality of user - term mals user terminals (UT1, UT2) and a plurality of network access servers 
(NASI, NAS2, NAS3X each of said plurality of user tcrminals u ser terminals (UT1, UT2) b eing 
^ coupled to a respective network access server of said plurality of network access servers (NASI, 

NAS2. NAS3\ comprising: CHARACTERISED IN THAT said method comprises the atopa 
e£ 

a.at conn e ction of said s e cond user - t e rminal (UT2) to its r es p e ctiv e n e twork acc e s s server 
(NASI) sending connection information by said r e sp e ctiv e n e twork access serv e r (NASI) 
to a subscriber data oorvor (SDS) inoludod in said network and oouplod to oaoh network 
aooooo oorvor (NASI, NAS2, NAS3); 

a. making a connection of said second user terminal to a first network access server, wherein 
said first network access server is said respective network access server of said second user 
terminal; 

b. in response to said connection of said second user terminal, sending connection information 
from said first network access server to a subscriber data server included in said network 
and coupled to each of said plurality of network access servers; 

brc^updating a database of said subscriber data server (SDS) with based on said connection 
information; 

c. handling by s aid subscrib e r data s e rver (SDS) of an incoming call reque s t from said first 
us e r - terminal (UT1) in ord e r to establish a connection between said first user - t e rminal 
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(UT1) and said s e cond us e r - t e rminal (UT2) said first user - terminal (UT1) being connected 
to a first virtual private network, said second user terminal (UT2) being oonnootod to a 
second virtual private network; 

d. soarohing in said database of said subscriber data server (SDS) for oonnootion information of 

said sooond user terminal (UT2); 

e . said subscrib e r data se rv e r (SDS) d e termining said re s pective network acc e s s s e rv e r (NASI) 

conncctod to said second user - terminal (UT2), using said conncotion information; 
d. upon an incoming request of communication from said first user terminal of said first 
vi rtual private network t o said second user terminal of said second virtual privat e n e tw ork, 
said subscriber data server locating said respective network access server connected to said 
\ second user terminal and n otifying said second user-terminal (UT2) about based on said 


terminal (UT1) ; 

g. said se cond u s er - t e rminal (UT2) initiating and controlling a switch - over of said conn e ction of 

said s e cond user - t e rminal (UT2) from said s e cond virtual privat e n e twork to s aid fir s t 
virtual private notwork; and 

h. said rospootivo network aoooss server (NASI) of said sooond user torminal (UT2) switching 

said oonnootion of said sooond usor terminal (UT2) from said sooond virtual privato 

notwork to said first virtual private network; and 
e. switching said second user terminal from said second virtual private network to said first 

virtual private network in response to said locating 
At switch over of said oonnootion of said sooond usor torminal (UT2) from said second virtual 

privato network to said first virtual privato notwork sending conn e ction information by said 

rospootivo notwork access server (NASI) to said subscriber data oorvor (SDS) . 

2. (currently amended): -The M e thod method according to claim 1, CHARACTERISED 
IN THAT w herei n said st e p of notifying said s e cond user torminal (ITT2) about said r e questing 



request of communication requesting of said oommunioation by fr om said first user- 
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of s aid communication by said first user terminal (UT1) is performed according to the following 
stops of: in d comprises : 
said incoming request of communication is handling by said subscriber data oorvor of an 

incoming call request from said first user-terminal and is handled by said subscriber data 

server; 

said locating includes searching in said database of said subscriber data server for connection 

information of said second user-terminal; 
said subscriber data server uses said connection information to determine d e terminin ^said 

virtual private network and said respective network access server connected to said second 

user-terminal , using said oonnootion information ; 
ft rsaid subscriber data server indicates receiving s aid incoming call request to ef-said subscriber 

data server (SDS) at said respective first r espective n etwork access server (NASI) 

connected to said second user-terminal-^UTS); and 
said respective r es p e ctiv e first n etwork access server (NASI) connected to said second user- 
terminal (UT2) sending notifies said incoming call r e qu e st of said first U3 e r - t e rminal (UTD 

te-_said second user-terminal of said incoming call request- fUT3}. 

3. (currently amended): —The M e thod m ethod according to claim 1, wherein 
CHARACTERISED IN THAT s aid step of notifying said second user-terminal a (UT2) about 
based on said requesting of said communication by — from said first user-terminal a (UT1) is 
performed over a transparent connection between said subscriber data server (SDS) and said 
second user-terminal (UT2) v ia said roopootivo f irst network access serve r (NASI) oonnootod to 
said sooond user terminal (UT2). 

4. (currently amended): -The Mothod m ethod according to claim 1, CHARACTERI S ED 
IN THAT said method f urther oompriooo comprising, before said step edH 
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receiving said incoming call request of said first user-terminal (UT2) at said respective network 
access server (NAS2) connected to said first user-terminal-^tPPi); and 

said respective network access server (NAS2) connected to said first user-terminal (UT1) 
sending said incoming call request of said first user-terminal (UT1) t o said subscriber data 
server (SDS) . 

5. (currently amended): -The Mothod m ethod according to claim 1, CHARACTERI S ED 
IN THAT said method f urther oomprioos comprising, b efore said step ed, the stop of s ending 
said incoming call request of said first user-terminal (UT1) over a transparent connection 
between said first user-terminal (UT1) and said subscriber data server (SDS) v ia said network 
access server (NAS2) connected to said first user-terminal. 

6. (currently amended): Network Aooosa Server (NASD A network access server for 
enabling a connection over a network between two a rfest-user -terminals (UT1) of two different 
virtual private networks and a sooond user terminal (UT2) over a network such as tho internet 
wherein said network oontaining a plurality of uaor terminals CUT1, UT2) and a plurality of 
n e twork acc es s s e rv e r s (NASI, NAS2, NAS3) each of said plurality of u ser_-terminals is (UT1, 
UT2) being coupled to a respective network access serve r of s aid plurality of n e twork acc es s 
oorvors (NASI, NAS2, NAS3) , CHARACTERISED IN THAT said t he network access server 
(NASI) comprises tho following moans to enable said connection using tho mothod according to 
claim 1 comprising : 

switch notification reception mean s for receivin g f S NRM\ adapted to roooivo a request from 
one of said s e cond user-term inatuser terminals, (UT2) t o initiate a switch-over of a 
connection of said second u s er - terminal (UT2) fr om one of a - said s e cond virtual private 
network n etworks t o the othe r a firot virtual privato notvvork ; 

switching means-(SM}, coupled with an input to an output of s aid switch notification reception 
means' for (SNRM) and adapted to perform performing said switch-over of said connection 
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of said s e cond us e r - t e rminal (UT2) from said seoond virtual privato n e twork to said first 
virtual private network ; and 
user tormi na hiser terminal connect notification sending means (HCNSM) , coupled with a» 
input to an output of s aid switching means 1 for sending (SM) and adapted to sond 
connection information to said-a_subscriber data server 2 (SDS) at u pon the connecting of 
one of said se cond user termin al user terminals (UT2) t o said resp e ctive n etwork access 
server (NASI) and at -upon said switch-over of said connection of one of said second u ser* 
terminals (UT2) fr om the one of the said second v irtual private n e twork networks t o said 
first virtual privato n e twork t he other . 

7. (currently amended): — N e twork The network access server (NASI) a ccording to 
eton -claim 6 , CHARACTERISED IN THAT said network access server (NASI) f urther 
compris e s comprising : 

connection establishment request reception means (CERRM11 adapted to roooivo for receiving 
from said subscriber data server a connection request from said subscriber data server 
(SDS) t o establish said connection between said first user terminal (UT1) oonnootod to said 
first virtual privato network and said sooon d two user- torminal t erminals (UT2) oonnootod to 
said se cond virtual privat e n e twork via said r e spectiv e network acc e ss s e rv e r (NASI) ; and 

connection establishment request sending means (CERSM2) , coupled with an input to an 



adaptod to notify f or notifying one of said sooond user terminal user terminals (UT2) about 
an incoming call from said first user tormi m lanother of said user terminals- ffeEPH 

8. (Currently Amended) N e twork Acc es s Server (NAS2) ? for enabling a conn e ction 
between a first user terminal (UT1) and a second user terminal (UT2) ovor a network such as the 
intornot, said network oontaining a plurality of user terminals (UT1, UT2) and a plurality of 
notwork aoooss servers (NAS1,NAS2, NAS3) oaoh of said plurality of user terminals (UT1, 




iaid connection establishment requesting reception means a (CERRM1) and 


6 


< 202-857*3238 > at 7/30/03 6:26:20 PM [Eastern Daylight Time] 



AMENDMENT UNDER 37 C.F.R. §1.111 
U.S. APPLICATION NO. 09/666,388 
ATTORNEY DOCKET NO. Q60803 

UT2) being coupl e d to a r e spective network access s e rver of said plurality of network access 
norvora (NASLNAS2. NAS3I CHARACTERISED IN THAT A network access server, 
defined as a second network access server, intended for use in a network operating according to a 
method for connecting a first user terminal of a first virtual private network to a second user 
terminal of a second virtual private network, said network being a network such as the internet, 
said network having a plurality of user terminals and a plurality of network access servers 
including said network access server, each of said plurality of user terminals being coupled to a 
respective network access server of said plurality of network access servers, the network 
operating method comprising: 

a. making a connection of said second user terminal to a first network access server, wherein 
said first network access server is said respective network access server of said second user 
terminal; 

b. in response to said connection of said second user terminal, sending connection information 
from said first network access server to a subscriber data server included in said network 
and coupled to each of said plurality of network access servers; 

c. updating a database of said subscriber data server based on said connection information; 

d. upon an incoming request of communication from said first user terminal to said second 
user terminal, said subscriber data server locating said respective network access server 
connected to said second user terminal and notifying said second user-terminal based on 
said request of communication from said first user-terminal; and 

e. switching said second user terminal from said second virtual private network to said first 
virtual private network in response to said locating. 

wherein: 

said incoming request of communication is an incoming call request from said first user- 
terminal and is handled by said subscriber data server; 
said locating includes searching in said database of said subscriber data server for 
connection information of said second user-terminal; 
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said subscriber data server uses said connection information to determine said virtual 
private network and said network access server connected to said second user- 
terminal; 

said subscriber data server indicates said incoming call request to said respective network 

access server connected to said second user-terminal; 
said respective network access server connected to said second user-terminal notifies said 
second user-terminal of said incoming call request: 
wherein said second n etwork access server (NAS2) comprises the following m e ans to enable 
said conn e ction using th e m e thod according to olaim 2 : 
connection establishment request reception means (CERRM1) , adapted to receive a 
connection request from said first user-terminal (UT1) to establish said connection 
between said first user-terminal (UT1) connected to said first virtual private network 
and said second user-terminal (UT2) connected to said second virtual private 
network; and 

connection establishment request sending means (CERSM 4 ) , coupled with an input to an 
output of said connection establishment requesting reception means (CERRM1) and 
adapted to notify said subscriber data server (SDS) about an incoming call from said 
first user-terminal (UT1) . 

9. (currently amended): — Each of said plurality ofA N etwork network access servers 
according to claim 6, CHARACTERI S ED IN THAT aaid Network access aorvor f urther 
oomprisos comprising : 

connection establishment request reception means (CERRM2) for receiving from one of said 
user terminals a connection request from said first user t e rminal (UT1) t o establish said 
connection between said first user-terminal (UT1) conn e cted to said first virtual privat e 
n e twork and said s e cond user terminal t wo user terminals (TJT2^ conn e ct e d to said s e cond 
virtual privat e n e twork ; and 
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connection establishment request sending means (CERSM3) , coupled with an input to an 
output of said connection establishment requesting reception means a (CERRM2) and 
adaptod to notify f or notifying said subscriber data server— _(SDS) about an incoming call 
from said first user torminal t he one of said user terminals- ftffB. 


10. (currently amended): Subscriber Data Serv e r (SDS), for e nabling a conn e ction of a first 
us e r - terminal (UT1) to a s e cond user terminal (UT2) over a network such as the int e rn e t, said 
notwork oontaining a plurality of user terminals (UT1, UT2) and a plurality of network aoooss 
servers (NASI, NAS2, NAS3) each of said plurality of uoor terminals (UT1, UT2) being coupled 
to a respective notwork aoooss server of said plurality of notwork aoooos servers (NASI, NAS2, 
NAS3) and said subscriber data aorvor (SDS) boing oouplod to oaoh notwork access aorvor of 
said plurality of n e twork acc e ss server s (NASI, NAS2, NAS3), said SaidA subscriber data 
server^ intended for use in a network having user terminals communicating with respective 
network access servers, wherein the network access servers communicate with the subscriber 
data server, and wherein some of the user terminals are in different virtual private networks, the 
subscriber data server comprising: oomprioos tho following moans to onablo said oonnootion 
using the method aooording to claim 1: 
a connection information database: 

us e r - terminal user terminal connect notification reception means (UTCNRM) , adapted to 
receive said-connection information upon the connection of one of the user terminals to one 
of the network access serversat oonnootion of said second user terminal (XJT2) to said 
rospootivo notwork aoooss sorvor (NASI) and at awitoh ovor of said oonnootion of said 
sooond usor terminal (UT2) from said sooond virtual private notwork to said first virtual 

LCI wui rv ? 

t luser terminal connect notification updating means., (UTCNUM) coupled with a» 
input to an output of said t he u ser terminal u ser terminal connect notification reception 
means , for updating (UTCNRM) and adaptod to update a t he connection information 
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database of s aid subscrib e r data sorver fSDS) with based on said t he connection 
information; 

connection establishment request reception means fCERRMl adapted to roooivo f or receiving 
a connection request^ from a first one of said first us or terminal t he user terminals a first 
one of the virtual private networks, f l^EH-Ho establish a connection with a second one of 
the user terminals in a second one of the virtual private networks b otw ee n said first user - 
torminal (UT1) oonnootod to a first virtual private network and said sooond user - terminal 
(UT2) conn e ct e d to said s e cond virtual privat e n e twork ; 

connection information searching means (RISM) , coupled with an input to an output of said t he 
connection establishment request reception means , for (CERRM) and adaptod to soaroh 
searching in said -the connection information database of said subsoribor data server (SDS) 
for the connection information of satd- the second usor - tormm a hiser terminal (XJT2) ; and 

connection establishment request sending means (CERSM1) , coupled with an input to an 



from said first user torminal u ser terminal according to the connection information of the 
second user terminal- ft^R 

1 1 . (currently amended): Second user terminal (UT2), for inclusion in a network such as tho 
intornot containing a plurality of such uoor terminals and a plurality of network aoooos oorvors 
(NASI, NAS2, NAS3) oaoh of said plurality of user terminals (UT1, UT2) being coupled to a 
rospootivo notwork aoooas sorvor of said plurality of network access servers (NAS! ? NAS2, 
NAS3X CHARACTERI S ED IN THAT said A user terminal intended for use in a network 
having user terminals communicating with respective network access servers, wherein the 
network access servers communicate with a subscriber data server, and wherein some of the user 
terminals are in different virtual private networks, the user terminal comprising: 


\ 
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Said o e oond uaor tormina! (UT2) comprises the following moans for onabling a oonnootion 
between a said first user terminal (UT1) and itoolf over said network using a method according 
to claim 1: 

connection establishment request reception means (CERRM3), adapted to roooivo for 
receiving, from the respective network access server of the user terminal a connection 
request of a different f rom said first uscr - term mal user terminal from a different virtual 
private network (UT1) via its respective network aoooss server (NAS2) t o establish a 
connection to the said second us e r t e rmin a luser terminal (UT2) ; 

incoming call handling means (ICHM) , coupled with an input to on output of said t he 
connection establishment request reception mean s, for handling (CERRM3) and adapted to 
handle said t he connection request from the different said first user terminal user terminal 
(UT1) ; and 

switch requesting means (SRM) , coupled with on input to an output of said t he incoming call 
handling means , for requesting (ICHM) and adapted to request said r es p e ctive first -the 
respective network access server (NASI) t o switch s&id -the connection of sakl -the second 
usor terminal user terminal (UTS) from a current second virtual private network to the 
different fr fest-virtual private networ k of the different user terminal . 

12. (currently amended):— Software A software m odule for running on a processing system 

for inclusion in a subscriber data server, intended for use in a network having user terminals 

communicating with respective network access servers, wherein the network access servers 

communicate with the subscriber data server, and wherein some of the user terminals are in 

different virtual private networks, the software module comprisin g Subsoribor Data Server (SDS) 

and for enabling a conn e ction of a first us e r t e rminal (UTD of a first virtual privat e n e twork t o a 

s e cond us e r - t e rminal (UT2) of a second virtual privat e network ov e r a notworic such as the 

int e rn e t, said n e twork containing a plurality of user terminals (UT1, UT2) and a plurality 

of network acc e ss s e rv e rs (NASI, NAS2, NAS3X e ach of said plurality of us e r t e rminals 

(UT1, UT2) being oouplod to a rospootivo network aoooss server of said plurality of 
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network acc e ss se rvors 1 (NASI, NAS2, NAS3) and said subscrib e r data s e rv e r (SDS) 
being coupled to each network aoooss server of aaid plurality of network aooess servers 
(NASI, NAS2, NAS3), said ooftwaro modulo — oomprisoo the following softwaro sub 
modules to enable said connection using the method aooording to claim 1 : 

a usor toF mmft kiser terminal connect notification reception sub-module, adapted to receive 
sfti4-connection information at -upon connection of any of the user terminals to any one of 
the network access servers 3aid scoond user - terminal (UT2) to said respective first n etwork 
acc e ss serv e r (NASI) and at switch ov e r of said conn e ction of said s e cond user t e rminal 
(UT2) from said s e cond virtual privat e n e twork to said first virtual private network ; 

a user tormmfthiser terminal connect notification updating sub-module, co-operating with 
the said usor torm ittft ktser terminal connect notification reception sub-modu^ and 
adapted to update a connection information database of said subscriber data server (SDS) 
with said b ased on the connection information; 

a_connection establishment request reception sub-module, adapted to receive a connection 
request from a first one of the said first us e r - t e rmi nal user terminals of one of the virtual 
private networks, (UT1) t o establish a connection with a b etween s econd one of the user 
terminals of a different one of the virtual private networks aaid first user - terminal (UT1) 
connected to a first virtual private network and said sooond usor terminal (UT2) oonnootod 
to said sooond virtual private network ; 

a connection information searching sub-module, co-operating with the s akl— connection 
establishment request reception sub-modu^ and adapted to search the connection 
information in said database for of said subscriber data server (SDS) for connection 
information of satd -the second usor torminal user terminal (UT2) ; and 

a_connection establishment request sending sub-module, co-operating with sak khe connection 
information searching sub-modu^ and adapted to notify sak khe second usor torminal u ser 
terminal (UT2) about an-the incoming call from sakt -the f irst user - t e rmi na luser terminal 
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13. (currently amended): — Softwaro modulo A software module intended for use in fo r 
running on a prooooaing system for inclusion in a given sooond u ser terminal of a network having 
user terminals communicating with respective network access servers, wherein the network 
access servers communicate with a subscriber data server, and wherein some of the user 
terminals are in different virtual private networks, the software module comprisin g fUT2) and for 
inclu s ion in a network such as th e internet containing a plurality of s uch user terminals and a 
plurality of network access servers^, (NASI, NAS2, NAS3) each of s aid plurality of usor - 
terminals (UT1, UT2) b e ing coupl e d to a respectiv e n e twork access server of said 
plurality of network acooos servers^ (NASI, NAS2, NAS3), CHARACTERISED IN 
THAT said softwaro modulo oompriaos the following softwaro sub modules for enabling 
a connection between a first user terminal (UT1) and itaolf over said network using a 
method according to olaiml ; 

a_connection establishment request reception sub-module, adapted to receive from the 
respective network access server a connection request a of a different fr om s aid first user - 
terminal u ser terminal, (UT1) via its r e sp e ctiv e ji e twork acc e ss serv e r (NAS2) t o establish 
a connection to the given said second user tormin a hiser terminal (UT2 V , 

an incoming call handling sub-module, co-operating with sakt -the connection establishment 
request reception sub-module a and adapted to handle satd -the connection reques t from said 
first user terminal (UT1) ; and 

a_switch requesting sub-module, co-operating with satd -the incoming call handling sub- 
modulei and adapted to request said r e spectiv e first -the respective n etwork access server 
(NASI) of the given user terminal t o switch said -the connection of said second t he given 
user torminal u ser terminal (UT2) f rom a current sooond virtual private network to the 
different virtual private network of the different user terminal a first virtual private network . 

14. (New): The method according to claim 1, wherein the step e further comprises: 
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a. said second user terminal initiating and controlling a switch-over of said connection of said 
second user terminal from said second virtual private network to said first virtual private 
network; 

b. said first network access server switching said connection of said second user terminal 
from said second virtual private network to said first virtual private network; and 

c. upon switch-over of said connection of said second user terminal from said second virtual 

private network to said first virtual private network, sending connection information from 
said first network access server to said subscriber data server . 
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